tailieunhanh - Bảo mật cho joomla part 7

Các mục trong màn hình này đặc biệt nên được gọi là "yêu cầu" hơn là khuyến khích. Cài đặt hiển thị ở đây là khuyến nghị quan trọng. Các thiết lập sai của Magic Quotes, Safe Mode, và Đăng ký Globals chịu trách nhiệm về nhiều vấn đề trong Joomla! | This material is copyright and is licensed for the sole use by Thomas Rosenblum on 4th December 2008 1010 SW High Ave. Topeka 66604 Chapter 3 Recommended Settings The items in this particular screen should be called required rather than recommended. The Recommended Settings shown here are important. The wrong setting of Magic Quotes Safe Mode and Register Globals was responsible for many problems in Joomla sites in the past. Setting them incorrectly could allow an attacker to take advantage of the site and exploit it. Interestingly here the tool lists the Register Globals as Recommended rather than required. Despite your personal stance on writing a secure code you should always set this to off in your Joomla site. It s like gravity not just a good idea but a law. The HISA tool is of great value and should be a part of every Joomla installation. Running this beforehand will help to make sure that you have set up the site properly. An important note It is advised to remove this tool as soon as you have the needed information. Since it provides a huge amount of information it could be used to research your site for an attack. The talented folks at have produced a more advanced suite of the tools consisting of a component and a module set. An addition to this powerful combination is Post-Joomla Installation Server Environment Audit This provides you a bevy of information about your site post-installation. It keeps your site functional and running at a peak performance with a good tool box. 67 This material is copyright and is licensed for the sole use by Thomas Rosenblum on 4th December 2008 1010 SW High Ave. Topeka 66604 Tools In addition to performance should something go awry with your site the trouble-shooting and problem resolution power that the component provides to you are beyond comparison. You can obtain diagnostic and configuration information to speed up the process of problem resolution. This information is wider and deeper than that of